$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: PTN0WmtZ6iSP/upcqYTjMerw9hKFYFO+Um3Dpu6vH9c= Subject key identifier: 86:31:61:AF:51:B7:F5:B7:9F:BD:46:AF:E1:5E:EF:FC:19:3A:F8:07 Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 0585 Signing time: Tue 04 Nov 2025 23:17:45 +0000 Manifest this update: Tue 04 Nov 2025 23:17:45 +0000 Manifest next update: Tue 11 Nov 2025 23:17:45 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: XBDnlc2M1s5NSEuzmnsvYAWSzwr3E5vDL8kpRXwsb30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: Nov 4 23:17:45 2025 GMT Not After : Nov 11 23:17:45 2025 GMT Subject: CN=690a8999-5737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:b1:78:8a:7c:10:28:8a:f4:cd:9e:d7:d2: 36:3f:02:d6:3c:81:2a:8d:b2:58:66:17:27:45:98: fd:cb:49:a3:4e:ef:ab:b9:e9:66:d5:97:31:40:50: 00:3a:5e:ed:20:b1:55:b0:40:f4:57:d3:5c:2f:20: 8a:32:94:00:ed:35:23:4d:02:99:90:bf:cd:ce:d2: 18:b6:50:3f:72:a4:7c:97:13:fb:62:5b:25:4c:5d: 2c:43:a7:4e:ee:59:98:b5:c6:07:f2:5b:9d:ee:9e: 57:ab:bb:17:df:51:f9:3e:51:19:bc:17:d0:5b:4d: ff:3d:a1:d3:fc:c7:c4:a2:1a:5b:ef:c6:30:e3:67: 39:c9:2e:2c:dc:1b:21:ed:52:d2:90:bc:9f:c5:5a: 92:de:c0:c5:48:60:19:74:4d:80:69:65:d7:de:05: 22:9f:97:fe:c0:23:3c:20:40:77:60:98:75:4f:39: 3c:0d:32:9b:fc:ac:cb:34:a6:1a:5f:dc:5c:ec:e9: 5a:58:5f:dd:bb:6a:17:6f:f8:29:c1:9f:42:c2:4e: 0a:d8:91:d5:59:6f:45:34:fd:10:81:c8:f6:08:b4: a1:00:ee:58:e4:1c:9f:1e:7f:06:22:86:5a:b2:7f: d2:5b:1a:c9:28:60:94:78:1e:d5:e5:25:5e:8d:1e: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:61:AF:51:B7:F5:B7:9F:BD:46:AF:E1:5E:EF:FC:19:3A:F8:07 X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2f:e6:98:5f:6c:79:d8:15:e7:a0:66:db:ea:3b:78:c9:89: 32:78:9e:b3:e6:5e:db:e0:be:df:fd:f1:0f:ec:ba:23:4e:f9: 29:e4:c7:b0:e5:b4:9a:e5:d1:41:83:92:24:30:01:09:b4:f1: d3:10:fc:07:b4:e8:2a:df:27:3b:fd:4d:50:d1:b8:cb:04:3a: 47:63:52:6b:43:8c:49:81:a6:18:3e:05:55:7b:ae:95:fd:b9: ae:96:2e:72:bd:55:d6:f1:6e:d0:04:b3:f5:5e:49:00:32:1c: 08:2a:2c:54:ae:91:8c:e5:7c:30:2d:ab:1d:75:b8:34:26:74: 58:e4:5a:58:20:ca:8a:40:44:42:22:1f:5b:d0:52:ce:d8:2d: 95:aa:7b:76:5e:6a:5c:e1:fc:82:4a:69:c5:c1:99:5b:40:a4: 8a:2d:81:75:ae:5a:5b:ef:b3:37:97:b4:c3:0e:e0:cf:e2:3a: 7c:28:f8:4f:15:89:01:70:e4:84:3d:06:13:2f:7e:69:8d:64: 5a:47:bf:48:a5:71:5c:51:9b:da:ae:39:1d:9b:81:3b:b9:8d: 12:a5:f3:ac:15:17:b9:68:d5:a7:d6:4b:77:49:33:c1:37:eb: 57:66:ff:6e:07:05:04:eb:03:a1:8b:8d:d7:0e:3d:f5:9f:17: af:65:da:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUxMTA0MjMxNzQ1WhcNMjUxMTExMjMxNzQ1WjAYMRYwFAYD VQQDEw02OTBhODk5OS01NzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMqxeIp8ECiK9M2e19I2PwLWPIEqjbJYZhcnRZj9y0mjTu+ruelm1ZcxQFAA Ol7tILFVsED0V9NcLyCKMpQA7TUjTQKZkL/NztIYtlA/cqR8lxP7YlslTF0sQ6dO 7lmYtcYH8lud7p5Xq7sX31H5PlEZvBfQW03/PaHT/MfEohpb78Yw42c5yS4s3Bsh 7VLSkLyfxVqS3sDFSGAZdE2AaWXX3gUin5f+wCM8IEB3YJh1Tzk8DTKb/KzLNKYa X9xc7OlaWF/du2oXb/gpwZ9Cwk4K2JHVWW9FNP0Qgcj2CLShAO5Y5ByfHn8GIoZa sn/SWxrJKGCUeB7V5SVejR58fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYxYa9R t/W3n71Gr+Fe7/wZOvgHMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuL+aYX2x52BXnoGbb6jt4yYkyeJ6z5l7b4L7f/fEP7LojTvkp5Mew 5bSa5dFBg5IkMAEJtPHTEPwHtOgq3yc7/U1Q0bjLBDpHY1JrQ4xJgaYYPgVVe66V /bmuli5yvVXW8W7QBLP1XkkAMhwIKixUrpGM5XwwLasddbg0JnRY5FpYIMqKQERC Ih9b0FLO2C2Vqnt2Xmpc4fyCSmnFwZlbQKSKLYF1rlpb77M3l7TDDuDP4jp8KPhP FYkBcOSEPQYTL35pjWRaR79IpXFcUZvarjkdm4E7uY0SpfOsFRe5aNWn1kt3STPB N+tXZv9uBwUE6wOhi43XDj31nxevZdor -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:34 2025 by rpki-client